Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/NVAGAqPFadFxdKinNOXZQcPQIhg.roa
File: NVAGAqPFadFxdKinNOXZQcPQIhg.roa (raw, json)
Hash identifier: Pk+gJRU8O70le7lIKYSunDQrTBDcm8ywzX8T0i1mOmE=
Subject key identifier: 35:50:06:02:A3:C5:69:D1:71:74:A8:A7:34:E5:D9:41:C3:D0:22:18
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1FAC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NVAGAqPFadFxdKinNOXZQcPQIhg.roa
Signing time: Wed 18 Jun 2025 07:40:05 +0000
ROA not before: Wed 18 Jun 2025 07:40:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8108 (0x1fac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 07:40:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=35500602A3C569D17174A8A734E5D941C3D02218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:42:f1:2e:cc:12:cc:88:3c:0c:8e:29:33:
55:ee:2f:7f:00:07:a9:e9:47:a3:3e:79:e1:98:61:
e2:e8:92:3a:e4:58:a0:b6:d2:2c:c7:e1:e4:19:36:
b2:06:52:46:bf:71:33:73:f9:2a:8a:70:7a:b3:0c:
dc:92:30:f2:83:2e:7b:35:44:90:4d:e3:aa:be:0c:
f9:21:4f:a7:ef:24:47:6b:3a:46:a8:d2:4e:5a:91:
96:0f:56:9e:d8:a8:65:a3:58:32:3f:44:c7:01:07:
98:be:d3:06:ab:a1:d9:61:7f:e2:04:46:eb:da:29:
0a:6d:e2:ef:ed:86:b9:05:60:34:01:6c:d7:b0:9b:
37:12:3f:65:23:01:52:f0:53:91:b6:e2:46:21:fd:
a0:94:48:99:46:22:06:88:c4:1a:05:f8:34:3b:0d:
7d:26:de:04:0a:a0:f3:d3:03:ad:fb:02:cf:4d:50:
90:9c:7a:1c:18:90:39:39:16:5f:4e:5f:2d:2c:61:
a7:93:e0:76:1b:15:51:ab:46:c2:7b:8e:48:3e:da:
b4:04:fe:35:f2:78:bd:fa:3a:7c:cd:cd:12:75:a2:
0c:2a:ba:ec:b2:ad:15:1f:46:11:b8:5b:f1:b6:f7:
54:8e:b5:ab:fe:76:ff:7d:1c:36:3c:da:f4:76:53:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:50:06:02:A3:C5:69:D1:71:74:A8:A7:34:E5:D9:41:C3:D0:22:18
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NVAGAqPFadFxdKinNOXZQcPQIhg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:1f:f9:3f:d8:36:37:20:81:b2:44:37:78:7b:fd:aa:9c:85:
ca:de:2e:c2:c1:51:7f:33:b2:34:00:72:be:3e:ba:fd:55:63:
cf:e8:86:5b:dd:6d:0a:8f:45:79:35:70:d0:1f:46:62:b8:5a:
4d:91:1f:3e:72:c5:a2:52:b6:1c:b4:a2:98:fc:90:8c:20:4c:
1c:ba:0d:ab:a6:92:12:81:88:c6:48:3e:e9:62:92:86:47:77:
26:28:68:27:f2:6f:e0:fb:1f:e7:42:62:ee:89:78:f8:7a:93:
8a:bc:2a:d2:3f:68:36:05:f8:0e:0e:9c:a0:01:22:aa:f0:6f:
97:73:0d:95:96:bc:84:5e:0c:71:48:90:11:e6:11:d8:c0:52:
57:96:17:8d:68:ce:9c:7a:5e:8c:3a:a5:ba:68:fd:80:4c:70:
bd:b9:13:9d:25:e0:da:66:21:d7:7e:f1:62:b2:71:e0:0f:2e:
9e:ad:54:d4:6e:d5:4d:d6:7e:32:9e:3e:c8:c8:e0:c7:42:64:
73:e3:ed:bf:cb:7e:4a:26:19:02:f9:15:99:53:f9:81:b4:81:
d4:6a:35:8d:5a:2e:82:48:54:ff:08:a1:03:2d:ad:a7:b6:23:
a5:ea:1d:0c:97:1e:d6:6a:cf:e6:1b:50:08:66:28:14:c9:4b:
65:de:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:09:24 2025 by rpki-client